Lucene search
+L

77 matches found

EUVD
EUVD
added 2025/10/03 8:07 p.m.10 views

EUVD-2024-38166

Malicious code in bioql PyPI...

6.5CVSS6.6AI score0.0026EPSS
SaveExploits0References1
GithubExploit
GithubExploit
added 2025/09/25 4:43 p.m.300 views

Exploit for CVE-2025-22294

CVE-2025-2294 – Local File Inclusion LFI в WordPress-плагине...

9.8CVSS6.9AI score0.78202EPSS
SaveExploits12
RedhatCVE
RedhatCVE
added 2025/09/21 4:30 a.m.18 views

CVE-2025-8487

The Kubio AI Page Builder plugin for WordPress is vulnerable to unauthorized plugin installation due to a missing capability check on the kubio-image-hub-install-plugin AJAX action in all versions up to, and including, 2.6.3. This makes it possible for authenticated attackers, with Subscriber-lev...

5.4CVSS5AI score0.00262EPSS
SaveExploits0References1
NVD
NVD
added 2025/09/19 4:17 a.m.18 views

CVE-2025-8487

The Kubio AI Page Builder plugin for WordPress is vulnerable to unauthorized plugin installation due to a missing capability check on the kubio-image-hub-install-plugin AJAX action in all versions up to, and including, 2.6.3. This makes it possible for authenticated attackers, with Subscriber-lev...

5.4CVSS0.00262EPSS
SaveExploits0References3
CVE
CVE
added 2025/09/19 3:34 a.m.40 views

CVE-2025-8487

CVE-2025-8487 affects Kubio AI Page Builder for WordPress up to version 2.6.3. The vulnerability is caused by a missing capability check on the kubio-image-hub-install-plugin AJAX action, enabling authenticated users with Subscriber-level access and above to install the Image Hub plugin. Exploita...

5.4CVSS4.7AI score0.00262EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
added 2025/09/19 3:34 a.m.7 views

CVE-2025-8487 Kubio AI Page Builder <= 2.6.3 - Missing Authorization to Authenticated (Subscriber+) Limited Plugin Installation

The Kubio AI Page Builder plugin for WordPress is vulnerable to unauthorized plugin installation due to a missing capability check on the kubio-image-hub-install-plugin AJAX action in all versions up to, and including, 2.6.3. This makes it possible for authenticated attackers, with Subscriber-lev...

5.4CVSS4.6AI score0.00262EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2025/09/19 12:00 a.m.14 views

WordPress plugin Kubio AI Page Builder 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plug-in. A security vulnerability...

5.4CVSS6.1AI score0.00262EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2025/09/19 12:00 a.m.24 views

PT-2025-38508

Name of the Vulnerable Software and Affected Versions Kubio AI Page Builder plugin for WordPress versions up to and including 2.6.3 Description The Kubio AI Page Builder plugin for WordPress is susceptible to unauthorized plugin installation due to a missing capability check on the...

5.4CVSS5.4AI score0.00262EPSS
SaveExploits0References8
Patchstack
Patchstack
added 2025/09/18 9:36 p.m.14 views

WordPress Kubio AI Page Builder plugin <= 2.6.3 - Missing Authorization to Authenticated (Subscriber+) Limited Plugin Installation vulnerability

Missing Authorization to Authenticated Subscriber+ Limited Plugin Installation vulnerability discovered by wesley wcraft in WordPress Plugin Kubio AI Page Builder versions = 2.6.3...

5.4CVSS6.5AI score0.00262EPSS
SaveExploits0References1Affected Software1
GithubExploit
GithubExploit
added 2025/07/28 2:02 a.m.269 views

Exploit for CVE-2025-2294

CVE-2025-2294 - WordPress Kubio AI Page Builder Request/Res...

9.8CVSS9.8AI score0.78202EPSS
SaveExploits12
GithubExploit
GithubExploit
added 2025/05/24 8:35 a.m.326 views

Exploit for CVE-2025-2294

CVE-2025-2294 🚨 CVE-2025-2294 - Local File Inclusion LFI...

9.8CVSS8.2AI score0.78202EPSS
SaveExploits12
RedhatCVE
RedhatCVE
added 2025/05/23 7:06 a.m.10 views

CVE-2024-13516

The Kubio AI Page Builder plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'message' parameter in all versions up to, and including, 2.3.5 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitra...

6.1CVSS6.4AI score0.00291EPSS
SaveExploits0References1
GithubExploit
GithubExploit
added 2025/04/15 7:27 p.m.197 views

Exploit for CVE-2025-2294

🚨 Kubio AI Page Builder = 2.5.1 - Unauthenticated Local File...

9.8CVSS10AI score0.78202EPSS
SaveExploits12
Packet Storm
Packet Storm
added 2025/04/07 12:00 a.m.205 views

📄 Kubio AI Page Builder 2.5.1 Local File Inclusion

Kubio AI Page Builder versions 2.5.1 and below suffer from a local file inclusion vulnerability. Exploit Title: Kubio AI Page Builder = 2.5.1 - Local File Inclusion LFI Date: 2025-04-04 Exploit Author: Sheikh Mohammad Hasan https://github.com/4m3rr0r Vendor Homepage:...

9.8CVSS8.7AI score0.78202EPSS
SaveExploits12
Exploit DB
Exploit DB
added 2025/04/05 12:00 a.m.287 views

Kubio AI Page Builder 2.5.1 - Local File Inclusion (LFI)

Exploit Title: Kubio AI Page Builder = 2.5.1 - Local File Inclusion LFI Date: 2025-04-04 Exploit Author: Sheikh Mohammad Hasan https://github.com/4m3rr0r Vendor Homepage: https://wordpress.org/plugins/kubio/ Software Link: https://downloads.wordpress.org/plugin/kubio.2.5.1.zip Reference:...

9.8CVSS8.7AI score0.78202EPSS
SaveExploits12
GithubExploit
GithubExploit
added 2025/03/31 11:51 a.m.436 views

Exploit for CVE-2025-2294

Kubio Page Builder LFI Exploit CVE-2025-2294 !Pythonhttp...

9.8CVSS7AI score0.78202EPSS
SaveExploits12
RedhatCVE
RedhatCVE
added 2025/03/30 4:31 a.m.24 views

CVE-2025-2294

The Kubio AI Page Builder plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 2.5.1 via thekubiohybridthemeloadtemplate function. This makes it possible for unauthenticated attackers to include and execute arbitrary files on the server, allowing the...

9.8CVSS8.3AI score0.78202EPSS
SaveExploits12References1
Cvelist
Cvelist
added 2025/03/28 4:22 a.m.31 views

CVE-2025-2294 Kubio AI Page Builder <= 2.5.1 - Unauthenticated Local File Inclusion

The Kubio AI Page Builder plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 2.5.1 via thekubiohybridthemeloadtemplate function. This makes it possible for unauthenticated attackers to include and execute arbitrary files on the server, allowing the...

9.8CVSS0.78202EPSS
SaveExploits12References2
Vulnrichment
Vulnrichment
added 2025/03/28 4:22 a.m.16 views

CVE-2025-2294 Kubio AI Page Builder <= 2.5.1 - Unauthenticated Local File Inclusion

The Kubio AI Page Builder plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 2.5.1 via thekubiohybridthemeloadtemplate function. This makes it possible for unauthenticated attackers to include and execute arbitrary files on the server, allowing the...

9.8CVSS8.2AI score0.78202EPSS
SaveExploits12References2
Positive Technologies
Positive Technologies
added 2025/03/28 12:00 a.m.8 views

PT-2025-13432

Name of the Vulnerable Software and Affected Versions Kubio AI Page Builder for WordPress versions through 2.5.1 Description The Kubio AI Page Builder plugin for WordPress is susceptible to a Local File Inclusion issue via the kubio hybrid theme load template function. This allows unauthenticated...

9.8CVSS9.3AI score0.78202EPSS
SaveExploits12References28
Rows per page
Query Builder